What the course covers
About this course map
SSCP — Systems Security Certified Practitioner — is ISC2's certification for the people who run security day to day rather than set its strategy. If CISSP is for the person who decides which controls the organisation needs, SSCP is for the person who implements, monitors and operates them. It is aimed at security administrators, analysts, engineers and network professionals who are hands-on with the controls that keep an organisation running safely.
The value of SSCP is that it is genuinely operational. Its seven domains map to the actual responsibilities of a working security practitioner, and the exam tests whether you can apply them, not just define them. It is often the certification people take on the way to CISSP, once they have the operational experience but not yet the management scope.
This preparation programme follows the seven SSCP domains, each grounded in the daily work it describes.
Domain 01 — Security operations and administration
The core daily discipline of keeping controls running.
Domain 02 — Access controls
Deciding who gets to do what, and enforcing it.
Domain 03 — Risk identification, monitoring and analysis
Seeing risk and the signs of trouble.
Domain 04 — Incident response and recovery
What the practitioner does when something goes wrong.
Domain 05 — Cryptography
Applying cryptography correctly, which is where most of its failures come from.
Domain 06 — Network and communications security
Securing the network the practitioner operates.
Domain 07 — Systems and application security
Securing the endpoints and applications that run the business.
Exam & certification
- 1Train with us32 hours of instructor-led preparation, labs and practice questions.
- 2Sit the official examExam voucher sold separately. We buy it from the certification body on your behalf and send you the code — you book your own exam date.
- 3Get certifiedThe certification is awarded by ISC2 when you pass their exam.
What you receive
- ISC2 certification — issued by ISC2 after you pass, and verifiable with them.
- Hacky Security certificate of completion — for the training itself, with a unique ID.
- Checkable by employers — anyone can confirm our certificate on the Verify page.
This course is Hacky Security’s own preparation training. The certification itself is awarded by ISC2, not by us.
Similar courses
Independent preparation training delivered from Hacky Security's own curriculum. Hacky Security is not affiliated with or endorsed by the certification body named above. Certification names and codes are the trademarks of their respective owners and are used only to describe what this course prepares you for.


